$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json) Hash identifier: ggigodZwRt5cPlvnbXwGE37q0dxz21ytbAowuWb7bxw= Subject key identifier: 4F:CE:F4:61:DE:B5:6D:5B:C4:B5:76:C3:E4:8A:A9:3C:36:25:40:8E Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft Manifest number: 0187 Signing time: Wed 15 Apr 2026 04:08:08 +0000 Manifest this update: Wed 15 Apr 2026 04:08:07 +0000 Manifest next update: Wed 22 Apr 2026 04:08:07 +0000 Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: lxJdqhjXDJTfEdtKNzLDNizpsDzq86QH+hplnzcJP+g=) 2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: solgPQ655LM5Wziva07rC9OvNu/BbDCAz/mq1TMGAKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 04:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Validity Not Before: Apr 15 04:08:07 2026 GMT Not After : Apr 22 04:08:07 2026 GMT Subject: CN=69df0f27-54c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:82:34:5c:9d:3f:a8:ae:25:8d:a5:82:54:ed: ba:ad:ee:cb:10:cb:d4:19:9e:1b:3a:f6:50:f4:1a: c2:a0:b5:7c:5a:01:dd:4a:3d:0f:09:4a:86:5d:f9: c1:35:d7:47:ca:57:22:2b:b4:db:74:b0:4d:3d:36: ac:2b:35:7a:8a:b4:4c:50:91:2e:f5:8b:5f:32:6e: a6:de:ab:26:06:1e:af:8f:81:8c:64:45:8a:b7:ed: 7d:b2:af:d5:7d:aa:fe:a5:e6:8c:b9:07:f7:56:a0: b9:6d:e8:60:28:e4:7c:cc:1c:8f:89:5e:5b:65:a8: fd:22:2b:f3:30:c7:aa:12:2d:4d:f5:93:77:45:8d: 19:fe:a2:94:79:9a:03:f1:69:35:2f:a9:fe:8d:a5: 5b:58:72:67:37:fc:dd:a9:92:9c:aa:14:75:45:76: e9:8d:8f:04:c5:2e:05:6c:85:59:9a:1b:00:a7:bd: 11:87:2e:81:77:c7:65:b9:bd:ba:c9:76:7a:4f:47: 15:fd:e2:2e:86:d7:4b:59:b2:62:27:83:2d:7d:84: d1:93:3d:bd:29:35:3f:e9:19:cb:29:de:73:c3:ad: 9f:ae:a9:24:a1:13:15:85:fe:8e:8b:29:b7:30:15: 95:2b:37:3e:3f:5a:01:3a:d5:58:7f:44:27:5b:08: 79:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CE:F4:61:DE:B5:6D:5B:C4:B5:76:C3:E4:8A:A9:3C:36:25:40:8E X509v3 Authority Key Identifier: keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:96:3a:d5:48:ca:7b:3a:51:59:fb:f4:b9:d2:55:27:cc:d0: af:a0:48:5b:c5:d6:7f:fe:ed:67:28:db:72:6b:01:3b:fb:2a: ff:cf:c7:8d:d4:63:62:69:76:f6:76:23:2f:c1:37:54:d0:b7: 60:c6:d9:3a:2e:d1:72:59:cd:0f:b8:7c:fd:fe:87:29:0d:52: c7:c7:4f:e6:0a:2d:4f:75:9d:b8:5c:fb:3c:cf:6c:21:ac:ca: e7:6d:51:74:c5:39:a1:b4:f5:04:f7:f2:d8:78:d6:dc:de:9d: 5f:c2:34:50:32:e2:0d:e8:d2:48:bd:43:1a:e0:d1:a8:80:cd: 18:ae:3e:f1:2c:41:0e:55:d6:c6:8c:81:52:fa:d3:f6:a6:5e: 70:f1:e8:af:d1:be:8e:c8:78:05:cf:52:84:a2:34:b3:4b:22: 83:d6:64:85:f8:43:f0:5b:23:e5:5e:5e:a4:ee:49:3d:86:7a: 77:dc:73:bd:db:35:d7:f5:52:eb:ea:bb:5d:09:2b:73:b2:7c: d1:6b:72:b7:88:3f:84:3e:70:ff:d4:f8:83:0e:83:01:77:ea: f1:4a:f0:7d:fc:42:94:8c:48:86:07:97:37:fb:35:52:cf:2c: 5f:23:40:24:25:bb:53:d5:5c:f7:ec:1a:1f:f6:ce:5f:b9:93: 2d:9b:0e:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz MzQ3MjEwODIwHhcNMjYwNDE1MDQwODA3WhcNMjYwNDIyMDQwODA3WjAYMRYwFAYD VQQDEw02OWRmMGYyNy01NGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjII0XJ0/qK4ljaWCVO26re7LEMvUGZ4bOvZQ9BrCoLV8WgHdSj0PCUqGXfnB NddHylciK7TbdLBNPTasKzV6irRMUJEu9YtfMm6m3qsmBh6vj4GMZEWKt+19sq/V far+peaMuQf3VqC5behgKOR8zByPiV5bZaj9IivzMMeqEi1N9ZN3RY0Z/qKUeZoD 8Wk1L6n+jaVbWHJnN/zdqZKcqhR1RXbpjY8ExS4FbIVZmhsAp70Rhy6Bd8dlub26 yXZ6T0cV/eIuhtdLWbJiJ4MtfYTRkz29KTU/6RnLKd5zw62frqkkoRMVhf6Oiym3 MBWVKzc+P1oBOtVYf0QnWwh5XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/O9GHe tW1bxLV2w+SKqTw2JUCOMB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2 NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhB M3cybE96MlRFMll6UnlFSUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmZY61UjKezpRWfv0udJVJ8zQr6BIW8XWf/7tZyjbcmsBO/sq/8/HjdRjYml2 9nYjL8E3VNC3YMbZOi7RclnND7h8/f6HKQ1Sx8dP5gotT3WduFz7PM9sIazK521R dMU5obT1BPfy2HjW3N6dX8I0UDLiDejSSL1DGuDRqIDNGK4+8SxBDlXWxoyBUvrT 9qZecPHor9G+jsh4Bc9ShKI0s0sig9ZkhfhD8Fsj5V5epO5JPYZ6d9xzvds11/VS 6+q7XQkrc7J80Wtyt4g/hD5w/9T4gw6DAXfq8UrwffxClIxIhgeXN/s1Us8sXyNA JCW7U9Vc9+waH/bOX7mTLZsOjA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:27:50 2026 by rpki-client